Manage secrets and environment variables

Open source platform for fast-moving engineering teams to secure and deploy application secrets — from development to production.

Develop with Secrets

Shifting security left shouldn't be rocket science. You focus on building; we'll take care of SecretOps.

Seamless dev experience
Create, list and manage secrets from your terminal.
Runtime Secret Injection
Seamlessly inject secrets into your application, container, or runtime as environment variables.
Work with your stack
Works with any language or framework, without the need for any code changes or added dependencies.

Deploy Secrets

Centralize, integrate and automate secret deployment pipelines across your infrastructure.

A single source of truth
Centralize your application secrets and configurations.
Phase Console
Automate deployments
Automate critical tasks like secret rotation and keep your deployments in sync.
Phase Console
Work with your infrastructure
Set up automatic secret syncing pipelines in seconds to your favorite platforms.

Manage and Control

Every critical security feature out of the box, with sane defaults.

Audit logs
Batteries included audit logging to monitor every secret CRUD operation.
Phase Console
Role-based access control
Enforce least privilege with cryptographically backed RBAC and custom roles.
version: '1.0'
user:
  email: '[email protected]'
permissions:
  - application: 'StarlinkCommand'
    environments:
      - 'development'
      - 'production'
    folder: '*'
    access:
      - resource: 'secrets'
        actions:
          - 'create'
          - 'read'
          - 'update'
          - 'delete'
      - resource: 'integrations'
        actions:
          - 'create'
          - 'read'
          - 'update'
          - 'delete'
IP Allow Listing
Restrict access to secrets to specific IP ranges and networks.
stories

Trusted by builders

Engineers across a wide range of industries use Phase to manage secrets to build world-class software and deploy secrets to critical infrastructure.

  • I saw Phase on dev hunt and decided to check it out today. Really awesome project! I think this is more superior to other secret managers! Kudos and well done for the good work!
    Iroro
    Programmer & Technical Writer
  • This is a great tool! When you work with a distributed team it is always a real pain to share secrets and credentials. I also love the fact that you offer a self-hosted version. Especially in Europe a lot of companies insist on hosting on premise 😅
    Christofer
    Web Developer
  • Phase is a valuable resource for any engineering team looking to improve their security practices and deployment processes. Highly recommended for those looking for robust solutions!
    Nicola
    Senior Frontend Developer @Tiledesk
  • The DX is amazing, especially the CLI! Managing secrets has been such a pain, I am definitely gonna use Phase for projects I work on going forward. Super easy for me to recommend it to my peers.
    Shivam
    Lead Product Engineer @ Chatwoot
  • Phase has one of the most well thought out security architectures I've seen. The encryption implementation is one I show my students as a benchmark for robust cryptography in a real-world application.
    Ash
    Security Engineer & TA @ UofT
  • Phase looks like a solid tool for managing secrets in a secure and efficient way. I've used similar tools, but the ease of integration with other services like GitHub and AWS really sets this apart.
    Mary
    Co-founder @ Voxify
  • I have just starred the repo. The UX is much better than Infisical!
    Faizan
    CEO @ Quvor
  • Our team tried several tools before settling on Phase. The decision was easy once we self-hosted it on our Kubernetes cluster.
    Emily
    Senior Engineer
  • I was seeking a simpler and more cost-effective solution that precisely meets my requirements, and this is even easier than Infisical! Thanks for building Phase.
    Rebaz
    Developer
  • Switched from HashiCorp Vault to Phase and haven't looked back. The GitHub Action integration is a huge plus.
    Emma
    DevOps Engineer
  • Phase was super easy to set up and onboard our team. Love the DX.
    Ethan
    Security Consultant
  • Secret management was a mess for us. We don't know where to store them safely. Sharing this with our CTO!
    Alvaro
    Founder @ Clous
platform

Secret management that works for you

The Phase platform provides powerful tools to build flexible solutions to meet the needs of your stack. Architect your own secret management setup to be as simple or complex as you need.

import (
        "log"
        "github.com/phasehq/golang-sdk/phase"
)

getOpts := phase.GetSecretOptions{
  EnvName:   "Production",
  AppName:   "MyApp",
  KeyToFind: "API_KEY",
}

secret, err := phaseClient.Get(getOpts)
if err != nil {
    log.Fatalf("Failed to get secret: %v", err)
} else {
    log.Printf("Secret: %+v", secret)
}
API & SDKs
Access secrets programmatically and build powerful workflows via the REST API and versatile SDKs.
User key derivation
Secure by default
Phase uses a sophisticated end-to-end encryption architecture to secure secrets, provision access to users and machines, and provide multiple layers of protection accross the platform.Learn about Phase Security
Phase Console
Audit logs
Keep track of changes to secrets, user roles, permissions and access events with detailed logs.
DB_NAME
DB_HOST
DB_PORT
DB_USER
DB_PASSWORD
DB_CONN_STRING
> phase run "printenv | grep DB_CONN_STRING"
DB_CONN_STRING=postgresql://api:yc57lc4y57lk568gdxchg3@localhost:5432/postgres
Secret referencing
Construct sophisticated configuration patterns by using references to other secrets and inheriting values across folders and environments Explore
Phase Console
Native integrations
Integrate, don't replace. Phase works hand-in-hand with your favoritie tools and platforms to keep your application secrets secure and synced accross your infrastructure. Explore
Phase Console
Secret Diffs & Roll-back
Track secret changes over time via git-styled diffs. Restore secrets or entire environments with a single click.

Merged

We build in public. Check out the latest feature drops and improvements to Phase.

CLOUD

The fastest and easiest way to get started with Phase. Spin up an app in minutes. Hosted in Frankfurt 🇩🇪

SELF-HOSTED

Run Phase on your own infrastructure and maintain full control. Perfect for customers with strict compliance requirements.